Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
File: _gG0rfO5SE6VdhmUdLIbtCXgWvI.mft (raw, json)
Hash identifier: EwEHLTJqILLH/ZxF6J4GT04LuZlY41YveN3KLRHZUi0=
Subject key identifier: 93:9C:77:BC:B5:DB:44:6C:44:08:CB:F2:E1:9B:A5:90:BE:4D:76:61
Authority key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Certificate issuer: /CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Certificate serial: 0197B6A1407D73C2B22ABAB3B0DDF09F182A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: _gG0rfO5SE6VdhmUdLIbtCXgWvI.crl (hash: RRH1EQzT+xsBULHmuuxwPVT6GVACh8M1lEEWDOsQ7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:40:7d:73:c2:b2:2a:ba:b3:b0:dd:f0:9f:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=939c77bcb5db446c4408cbf2e19ba590be4d7661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:70:ff:9a:ea:ce:7e:88:0d:23:8d:02:38:93:
cc:1c:c9:a1:07:1c:6d:ec:38:ae:90:9c:72:8e:30:
8c:1e:b6:27:d4:36:97:20:ac:43:e9:67:80:cc:25:
50:f9:06:40:2b:5f:30:fd:48:40:1a:c7:a4:75:2c:
78:21:43:bb:83:81:70:85:44:eb:f5:4f:08:c9:96:
3d:ff:6a:d9:98:1a:91:37:c6:14:c7:01:5d:01:a6:
13:31:78:23:ab:29:2e:12:28:80:cc:da:c3:8d:6c:
14:ff:e4:26:cd:2b:cd:7b:aa:38:28:10:26:ce:02:
23:c1:ce:5b:70:42:4a:03:d5:e4:be:12:10:5d:24:
b5:17:c1:b6:00:7d:17:f3:41:28:0c:d8:63:de:06:
0d:e9:96:2b:17:31:e4:39:9b:89:91:11:63:2a:95:
b2:23:dc:3b:6f:8a:a5:b5:b7:90:1a:27:9f:01:86:
3b:66:55:7e:6d:37:4a:47:7a:cf:05:b0:c8:e2:f6:
05:8d:c5:a5:28:82:6f:62:88:23:5f:0b:c8:2c:84:
73:f6:51:e8:b4:ad:93:6d:7f:44:9a:c3:ab:61:1c:
9e:d3:b0:ba:96:55:50:d1:b7:9f:71:28:e4:fe:38:
ee:19:d7:c8:72:b5:19:8c:7b:e9:42:70:aa:db:40:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:77:BC:B5:DB:44:6C:44:08:CB:F2:E1:9B:A5:90:BE:4D:76:61
X509v3 Authority Key Identifier:
keyid:FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:d8:04:29:47:ac:df:f2:42:35:b0:a3:30:16:e9:52:35:
f4:97:bf:be:de:91:b9:b7:5b:be:0c:57:2a:c0:e4:a9:6c:09:
c0:1f:25:79:8b:e8:66:0e:fd:1d:7a:5d:5d:d9:ca:7c:7f:f4:
63:92:50:28:a4:7c:cc:4b:81:25:8c:f9:a4:3e:92:a8:77:b1:
aa:23:42:46:3e:47:3e:df:4a:ae:94:b9:f9:87:29:fd:41:aa:
f0:de:53:77:c7:8b:84:87:99:66:9f:ea:1d:68:59:0d:df:c2:
e3:99:9b:d8:58:f7:c8:8f:60:6d:1c:1e:b1:1f:d3:93:fa:95:
82:64:44:15:47:7c:99:90:f1:45:66:5c:42:ce:5f:13:3e:9f:
f1:bc:cf:e1:99:63:f5:73:07:b2:14:41:02:b3:0c:6d:18:98:
9d:83:f9:40:34:05:c3:35:f7:77:67:32:84:42:9f:19:76:99:
05:2f:73:49:75:52:b7:c5:fc:e5:86:15:ae:9c:91:af:70:88:
b3:c4:7d:f3:97:9b:30:a1:2e:e8:25:02:a0:6c:39:24:96:d0:
b5:43:07:99:36:11:4d:cd:9d:2b:e7:74:2e:18:1f:1e:eb:66:
2b:74:5f:eb:e6:3c:db:36:98:d7:eb:4c:a5:93:e5:a9:28:c8:
15:f5:cf:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUB9c8KyKrqzsN3wnxgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMDFiNGFkZjNiOTQ4NGU5NTc2MTk5NDc0YjIxYmI0MjVl
MDVhZjIwHhcNMjUwNjI4MTMwMTUwWhcNMjUwNjI5MTMwMTUwWjAzMTEwLwYDVQQD
Eyg5MzljNzdiY2I1ZGI0NDZjNDQwOGNiZjJlMTliYTU5MGJlNGQ3NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nD/murOfogNI40COJPMHMmhBxxt
7DiukJxyjjCMHrYn1DaXIKxD6WeAzCVQ+QZAK18w/UhAGsekdSx4IUO7g4FwhUTr
9U8IyZY9/2rZmBqRN8YUxwFdAaYTMXgjqykuEiiAzNrDjWwU/+QmzSvNe6o4KBAm
zgIjwc5bcEJKA9XkvhIQXSS1F8G2AH0X80EoDNhj3gYN6ZYrFzHkOZuJkRFjKpWy
I9w7b4qltbeQGiefAYY7ZlV+bTdKR3rPBbDI4vYFjcWlKIJvYogjXwvILIRz9lHo
tK2TbX9EmsOrYRye07C6llVQ0befcSjk/jjuGdfIcrUZjHvpQnCq20DhGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOcd7y120RsRAjL8uGbpZC+TXZhMB8GA1UdIwQY
MBaAFP4BtK3zuUhOlXYZlHSyG7Ql4FryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dHMHJmTzVTRTZWZGhtVWRMSWJ0Q1hnV3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kODcyNjYtMWRhNC00NDQ2LWJlMzQt
Zjk0NzQzYjI2NTM3LzEvX2dHMHJmTzVTRTZWZGhtVWRMSWJ0Q1hnV3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kODcyNjYtMWRhNC00NDQ2LWJlMzQtZjk0NzQzYjI2NTM3
LzEvX2dHMHJmTzVTRTZWZGhtVWRMSWJ0Q1hnV3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoHYBClH
rN/yQjWwozAW6VI19Je/vt6RubdbvgxXKsDkqWwJwB8leYvoZg79HXpdXdnKfH/0
Y5JQKKR8zEuBJYz5pD6SqHexqiNCRj5HPt9KrpS5+Ycp/UGq8N5Td8eLhIeZZp/q
HWhZDd/C45mb2Fj3yI9gbRwesR/Tk/qVgmREFUd8mZDxRWZcQs5fEz6f8bzP4Zlj
9XMHshRBArMMbRiYnYP5QDQFwzX3d2cyhEKfGXaZBS9zSXVSt8X85YYVrpyRr3CI
s8R985ebMKEu6CUCoGw5JJbQtUMHmTYRTc2dK+d0LhgfHutmK3Rf6+Y82zaY1+tM
pZPlqSjIFfXPRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:35 2025 by rpki-client